← Back to Infoblox 7.x DNS Security Technical Implementation Guide

V-214223

CAT II (Medium)

Infoblox Grid configuration must be backed up on a regular basis.

Rule ID

SV-214223r961863_rule

STIG

Infoblox 7.x DNS Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000366

Discussion

The Infoblox Grid Master is the central point of management within an Infoblox Grid. The Grid Master retains a full copy of the configuration used for the entire Grid. In the event of system failure, a configuration backup must be preserved. An Infoblox member may also be configured as a Grid Master Candidate which is a synchronized to the Grid Master. The Candidate can be promoted in the event of system failure on the Grid Master.

Check Content

Navigate to Grid >> Grid Manager >> Members tab.

In the toolbar click the drop-down menu for "Backup", "Schedule Backup".
Verify configuration of a remote backup option (TFTP, FTP, or SCP).
Review the existence of backup files on the remote system.

If a remote backup system is not configured, or a local backup procedure is not documented, this is a finding.

If no remote or local backup is configured, but the Grid contains a Grid Master candidate, the severity of the finding is reduced.

Fix Text

Navigate to Grid >> Grid Manager >> Members tab.

In the toolbar click the drop-down menu for "Backup", "Schedule Backup".
Configure remote backup to TFTP, FTP, or SCP.
When complete, click "Save & Close" to save the changes and exit the "Properties" screen.

Perform a service restart if necessary. 

Review the existence of backup files on the remote system.